TheRider62

Yes, the backend looks perfectly normal. All the pages are there, as well as all the posts.

Same Problem here. It’s the latest plugin, the installation is on some Linux machine. I am using Multi-Site-Wordpress.

Please help!

I tried the bbpress plugins “bb-NoSpamUser” and “Human Test for bbPress” but they both didn’t seem to do their job. Or there was some other cause I am still unaware of.

Now I activated Simon Weasleys “Disable Registrations” plugin that was described in you link, Ipstenu. Thanks a lot. The second link doesn’t work anymore, though.

Thanks for all of your support, people. I know this is not a bbpress forum, but I first had to find out bbpress was the culprit. And, over at bbpress.org, nobody answered my call.

BTW: This is the site I have been talking about all the time: https://blog-net.ch.

Now it really gets at my nerves. There are still new spam user registrations coming in, even though

• I added two bbPress plugins to avoid spam, <b>and</b>
• I renamed the bbPress register.php file to something else not even ending in .php

And there are <b>still</b> spam registrations coming through.

Does anybody have any other ideas how to stop that? Are we approaching a bug report here, maybe?

Yes, I know, but there is no option in bbpress to turn off user registrations. Or, at least, I couldn’t find it. This is why, instead, I installed and activated two bbpress plugins that try to control spam registrations.

ok. I am stupid. I just realized that the bbPress install I run in parallel and integrated still allows registrations. I therefore downloaded and installed two anti-spam plugins for bbPress and hope the issue is solved. Thanks for your support.

This is really getting out of hands. Since my last post here, I again got 54 new spam user registrations. This is ridiculous. Is there anything else I can do to avoid that?

• I set “Registration is disabled” on the “Super Admin” / “Options” tab
• I disabled “Allow site administrators to add new users to their site via the Users->Add New page” on the same screen
• I renamed wp-register.php to something completely different, not even ending in .php
• I deleted all spam users I could locate. I now have only 22 users and I know each and every one of them

Is there anything else I can do? Any kind of diagnostics? Other suggestions?

I just noticed that there are about 30 pages of spam users, too. Separate from the wp users.

That was wrong. It was the same number of users. But I realized there were still half a dozen spam accounts among them, and deleted them. Hopefully, I got them all now.

But I still need info about how to make bbpress safer.

Then go disable registration on bbpress, cuz that’s how they’re getting in.

I tried, but I could not find that option. Where exactly is it?

It’s a while since I logged into the bbPress installation. I just noticed that there are about 30 pages of spam users, too. Separate from the wp users.

And the wp install has 16 new spam users again. Renaming wp-signup.ph and disabling “Allow site administrators to add new users to their site via the “Users->Add New” page” didn’t do the trick.

Anything else I can do? Are you guys sure this is not a bug in wp but user error (my configuration error)?

Sigh.

BTW, I hope you are referring to the super admin option “Allow site administrators to add new users to their site via the “Users->Add New” page.” — because I can’t find any option called “allow users to add other users”.

uh-oh. Another one just registered. His emailaddress is [email protected]. Fu..ing assholes. This means “allow users to add other users” didn’t do the job alone. I will rename wp-signup.php now.

I am running bbpress, yes, and using for as a means to support my users. I tried buddypress, but since it wasn’t really used on my network, I disabled it after a while.

Thank you for this hint. I’ll see if it helps.

There have been no spam sites whatsoever (since I disabled registrations). Only spam users. So, maybe your suggestion really is the solution. But that would also mean that the spammers have the password of one of my admin users. I guess I have to change all passwords.

oops *blushing* sorry. Somehow my search was unsuccessful. I must have mistyped the search keywords.

Thanks. Over-and-out.

I tend to not use mu-plugins at all. Reason: I can activate any plugin sitewide. Then I still have it displayed in the plugins list, I can update it easily from there. No hassle with mu-plugins. Am I overlooking something?